{"id":"OSV-2023-72","aliases":[],"status":"published","title":"Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56057\n\n```\nCrash type: Heap-buffer-overflow WRITE 4\nCrash state:\nperfetto::trace_processor::TrackEventParser::ParseTrackDescriptor\nperfetto::trace_processor::TrackEventModule::ParseTracePacketData\nperfetto::trace_processor::ProtoTraceParser::ParseTracePacket\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-02-18T13:00:15.470143Z","modified":"2026-10-20T17:32:32Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"perfetto","ranges":[{"type":"GIT","events":[{"introduced":"8209fb9b9a4156232aa87ad4621e541bfb777ec1"},{"fixed":"9a7f09383dd39f19e662d428321ca708a2a600a3"},{"introduced":"2989695573968a38beccedfbce31120f765955d9"},{"introduced":"526a308783cc0131dd2c5986d60c66708c387c35"},{"introduced":"4d0df0d53d302ea9fd91bd287f12f7f9216553c1"},{"introduced":"c1c313e31ff40da149374f515c70ce54c1b161ef"},{"introduced":"63477834789c9a565a2be80f6f5b74329c5c239e"},{"introduced":"6190b2631650d385b61997bc0a4ee282b5b91cc2"},{"fixed":"d14efca0ed462e9a6a771e5f08c857c2a673edc3"},{"fixed":"3f13748b7c74c3c5d5840b8b71bf790953337a36"},{"fixed":"0f652c40a84111a91c677b5cc92fd6fcff34d397"},{"fixed":"5ad0754d951984fa68247c94abcaa5bf7f8c3776"},{"fixed":"c4d8d2dfeabc4528f696d780cc5649270238ec3f"},{"fixed":"5ef14724857297dbae68bbf94fcb3e874fc37b1b"}]}],"versions":["android-13.0.0_r1","android-13.0.0_r12","android-13.0.0_r2","android-13.0.0_r3","android-13.0.0_r31","android-13.0.0_r4","android-13.0.0_r5","android-13.0.0_r6","android-13.0.0_r7","android-13.0.0_r8","android-cts-13.0_r1","android-cts-13.0_r2","android-cts-13.0_r3","android-mainline-12.0.0_r100","android-mainline-12.0.0_r122","android-mainline-12.0.0_r49","android-mainline-12.0.0_r59","android-mainline-12.0.0_r63","android-mainline-12.0.0_r70","android-mainline-12.0.0_r77","android-mainline-12.0.0_r99","android-platform-13.0.0_r1","android-platform-13.0.0_r2","android-security-13.0.0_r1","android-security-13.0.0_r2","android-vts-13.0_r1","android-vts-13.0_r2","android-vts-13.0_r3","platform-tools-29.0.1","platform-tools-29.0.2","platform-tools-29.0.3","platform-tools-29.0.4","platform-tools-29.0.5","platform-tools-29.0.6","platform-tools-30.0.0","platform-tools-30.0.1","platform-tools-30.0.2","platform-tools-30.0.3","platform-tools-30.0.4","platform-tools-30.0.5","platform-tools-31.0.0","platform-tools-31.0.1","platform-tools-31.0.2","platform-tools-31.0.3","platform-tools-32.0.0","platform-tools-33.0.0","platform-tools-33.0.1","platform-tools-33.0.2","platform-tools-33.0.3","platform-tools-33.0.4","platform-tools-34.0.0","v27.0","v27.1","v28.0","v29.0","v30.0","v31.0","v32.0","v32.1","v32.2","android-security-13.0.0_r3","android-security-13.0.0_r4"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56057","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2023-72","title":"Heap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptor","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56057\n\n```\nCrash type: Heap-buffer-overflow WRITE 4\nCrash state:\nperfetto::trace_processor::TrackEventParser::ParseTrackDescriptor\nperfetto::trace_processor::TrackEventModule::ParseTracePacketData\nperfetto::trace_processor::ProtoTraceParser::ParseTracePacket\n```\n","status":"published","published":"2023-02-18T13:00:15.470143Z","modified":"2026-10-20T17:32:32.065624425Z","updated_at":"2026-11-02T15:52:49.747775Z"}]}}